Lucene search

K
prionPRIOn knowledge basePRION:CVE-2010-2740
HistoryOct 13, 2010 - 7:00 p.m.

Design/Logic Flaw

2010-10-1319:00:00
PRIOn knowledge base
www.prio-n.com
4

6.7 Medium

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.413 Medium

EPSS

Percentile

97.2%

The OpenType Font (OTF) format driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly perform memory allocation during font parsing, which allows local users to gain privileges via a crafted application, aka “OpenType Font Parsing Vulnerability.”

CPENameOperatorVersion
windows_xpeq sp2x64

6.7 Medium

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.413 Medium

EPSS

Percentile

97.2%